Governance & Ethics

Protocol Disclaimer

Exanteon operates as an independent infrastructure for voluntary ex-ante governance across institutional boundaries.

Its configurable protocols enable participating legal entities to establish attributable prior commitments and preserve their subsequently reported evolution through persistent, timestamped and technically notarised governance records.

These records may include reported positive performance, modifications, exceptions and incidents. Their purpose is to make institutional continuity observable under defined access conditions, not to supervise or judge the underlying behaviour.

Technical notarisation concerns the integrity, attribution and recording of information. It does not independently establish the truth of a declaration or the occurrence of a reported event.

Exanteon does not provide:

• Independent certification of contractual fulfilment or institutional compliance.
• Credit ratings, counterparty approval or autonomous financial risk determinations.
• Regulatory supervision, legal judgments or enforcement.
• Independent monitoring or factual verification of institutional conduct.
• Automatic authorisation or execution decisions.

Authorised institutions may assess recorded information for legitimate contractual, commercial, audit, governance or risk-related purposes, subject to applicable law and access conditions.

Each protocol defines the relevant participation and reporting conditions. Access, disclosure, corrections, disputes and retention are governed by the applicable contractual and legal framework.

Participation remains voluntary. Membership and protocol commitments do not constitute accreditation, approval or certification.

Exanteon preserves the attributable record. Participating institutions and competent downstream authorities retain responsibility for interpreting information and determining its significance.

Code of Ethics (Notice)

Exanteon is committed to institutional neutrality, integrity, transparency, confidentiality, proportionality and responsible governance.

Its ethical responsibility concerns the administration of an independent infrastructure, not the moral classification of participating institutions.

The following principles govern its operation and responsible use:

• Voluntary Participation: Institutions choose whether to establish commitments under applicable protocols.
• Responsible Attribution: Submissions must originate from appropriately authorised participants and remain attributable to their reporting sources.
• Positive and Negative Visibility: Reported fulfilment and positive developments are treated as legitimate governance information alongside reported exceptions and incidents.
• Neutrality and Impartiality: Exanteon does not independently determine whether an institution has behaved ethically, complied with its obligations or deserves commercial approval.
• Confidentiality and Proportionality: Information is disclosed under defined conditions, with appropriate regard for participating institutions' rights and applicable data protection requirements.
• Prevention of Misuse: Unauthorised disclosure, identity misrepresentation, deliberately misleading submissions, coercive use and unlawful or discriminatory exploitation of information are prohibited.

Exanteon may restrict, suspend or terminate access where necessary under applicable membership and platform terms, including in cases of unlawful use, material contractual breach or significant security risk.

Such measures concern the responsible operation and protection of the infrastructure. They do not constitute behavioural sanctions based merely on an adverse institutional report.

Where legally required or otherwise lawfully justified, relevant matters may be referred to competent authorities.

Members remain responsible for their own commitments, submissions and downstream decisions. Exanteon remains responsible for its own contractual, operational and legal obligations.

Governance & Security Statement

Exanteon's infrastructure is designed around independent institutional attribution, persistent record integrity, governed access and the separation of recording functions from downstream decision-making.

Its governance and security approach is founded on data protection by design, security by design, proportionality and accountability.

Appropriate technical and organisational measures must address authentication, access permissions, confidentiality, protection against unauthorised alteration, recording integrity, operational resilience, incident management and relevant third-party risks.

Specific safeguards are implemented, documented and reviewed according to their operational scope, the nature of the information processed and applicable legal requirements.

Technical notarisation enables recorded information and its provenance to remain attributable and traceable over time. It does not guarantee that underlying declarations are accurate or that contractual performance has occurred.

The persistent character of governance records does not override lawful correction, restriction, retention or personal-data protection requirements.

Institutional Independence

Exanteon operates independently of participating institutions when constituting and maintaining the recorded governance state.

This independence does not confer supervisory authority, regulatory status or responsibility for participants' substantive contractual decisions.

Data Protection and HeyData Affiliation

Exanteon maintains an affiliate relationship with heyData, a provider of data protection and compliance-related services.

This affiliation does not, by itself, constitute external certification, independent audit, appointment of a data protection officer or transfer of Exanteon's legal responsibilities.

Any separate compliance services or independent assessments are governed by their applicable agreements and documented scope.

Further information concerning privacy, data processing, confidentiality and institutional due diligence is available through Exanteon's legal documentation and, where appropriate, its Institutional Data Room.

Exanteon independently maintains the observable governance record. The meaning, reliability and consequences of that information remain matters for competent downstream institutions.